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Abstract. The concept of symmetric extendibility has recently drawn attention in 
the context of tolerable error rates in quantum cryptography, where it can be used to 
decide whether quantum states shared between two parties can be purified by means of 
entanglement purification with one-way classical communication only. Unfortunately, 
at present there exists no simple general criterion to decide whether a state possesses a 
symmetric extension or not. In this article we derive criteria for symmetric extendibility 
within subclasses of all two-qudit states. Using these criteria, we can completely solve 
the problem for a two-parameter family of two-qudit states, which includes the isotropic 
states as a subclass. 
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1. Introduction 

The concept of symmetric extendibility has recently been introduced into the field 
of quantum cryptography as means to decide whether quantum states shared by two 
parties, Alice and Bob, may be purified by entanglement purification protocols using 
one-way classical communication only. Whereas there exist criteria for the case of two- 
qubit states which can be applied in quantum cryptography [TJ [2] , very little is known 
about higher- dimensional states. The purpose of this work is to derive criteria for a 
subclass of all two-qudit states, which may be applied in quantum cryptography using 
higher- dimensional quantum systems (qudits) as carriers of information. 

The outline of this article is the following: in this section we shall introduce the 
basic concepts and notation; this includes the Hurwitz-Sylvester criterion for positivity, 
on which a large part of our discussion relies. In section [2] we introduce the class of 
^-invariant two-qudit states, which are of interest in quantum cryptography [3], H]; 
for these states we derive a criterion (Theorem [1]) in order to decide whether they are 
symmetrically extendible or not. We restrict our focus to the class of Bell-diagonal 
^-invariant states, which are of even greater interest in quantum cryptography j3j HI [5] 
in section [3] and simplify our criterion to find Theorem In a subclass of these states 
we use this theorem to completely solve the question of symmetric extendibility in a 
two-parameter family of two-qudit states, which form a superset of the isotropic states. 
Finally, we conclude the paper with section HI 

1.1. Definition and basic facts 

We consider three (i-dimensional Hilbert spaces Ha = Hb = He = C d , d 6 N \ {1} 
(this naming arises from Alice, Bob and Eve in quantum cryptography), each of which 
has a basis labelled by the elements of the ring of residue classes Z/g?Z. This ring we 
shall identify with the numbers in Z^ := {0, . . . , d — 1}, where all the operations (in 
particular, addition "©" and subtraction "0" ) are taken modulo d. In the following we 
take a basis to be {|0), |1), . . . , \d — 1}} C <C d and all sums run over Z^. We start with 
the definition of symmetric extendibility; in a more general context, it may be called 
(1, 2)-symmetric extendibility [6], but this is not within the scope of this work. 

Definition 1 (Symmetric extendibility) 

A state pab on Ha®Hb is called symmetrically extendible, if there exists a state pabe 
on Ha <S> Hb <8> He with He = Hb, such that Pabe = Paeb and Tr E Pabe = Pab hold. 

Obviously all separable states have a symmetric extension, whilst no pure entangled state 
does. The general solution to the problem, whether a state is symmetrically extendible 
or not is unsolved, however, a criterion for Bell-diagonal two-qubit states is known [1] 
and, more generally, criteria for general two-qubit states have been investigated [2]. 
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To describe the problem more explicitly, consider two general density matrices on 
the Hilbert spaces Ha ®Hb and Ha ®Hb ®He, respectively: 



In order for pabe to be a symmetric extension of pab three conditions must hold: 

• Symmetry (between B and E): aijk, pgr = a>ikj,prq f° r all i, j, k, p, q, r G Z d ; 

• Trace condition (or extension property): J2kez d a ijk,pqk = a ij,pq for h j, Pi Q £ ^d, 

• Positivity (including hermiticity): pabe > 0. 

The third property guarantees that Pabe is a quantum state, and the interplay between 
all three conditions causes the main problem in determining whether a symmetric 
extension exists or not. 

1.2. The Hurwitz- Sylvester criterion 

For our purposes the most useful condition for checking, whether a matrix is positive 
(more precisely, positive semidefinite), is the Hurwitz-Sylvester criterion, which we will 
briefly explain in the following: Let A G <C dxd be an arbitrary matrix represented with 
respect to some fixed basis set, e.g. B = {|0), |1), ...Ad — 1)}. Choosing any non- 
empty subset S C B with cardinality r = \S\, we can construct the associated r x r 
matrix by skipping all rows and columns of A, whose basis vectors do not appear in S; 
the determinants of such subsets are called principal minors of order r, and there are 
altogether 2 d — 1 principal minors of A. We now state the criterion; cf. e.g. [7, p. 282]. 

Lemma 1 (Hurwitz-Sylvester criterion for positivity) 

A matrix A G C dxd is positive, if and only if all its principal minors are non-negative. 

This criterion is not to be confused with the better known Hurwitz-Sylvester criterion 
for positive definite matrices, which states that a matrix is positive definite, if and only 
if all leading principal minors, that is the determinants of the d upper left submatrices, 
are (strictly) positive. Note in particular that Lemma [1] implies that block- diagonal 
matrices are positive, if and only if all blocks are positive. 

2. Symmetric extendibility of ^-invariant states 

In this section we introduce the class of states we are interested in, the il 2 -invariant 
states. These states were shown to be of interest in quantum cryptography [3] , which is 
the main impetus for our investigation. We will derive a criterion (Theorem [1]) in order 
to decide whether there exists at least one possible symmetric extension. 




(1) 



(2) 
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2.1. Invariant states and commutants 

It is yet not feasible to derive a criterion to decide whether an arbitrary two-qudit state 
possesses a symmetric extension or not. Thus, in order to progress we have to choose an 
appropriate class of these states, which should both be of physical interest and enable 
us to find a criterion for symmetric extendibility. A convenient way of describing states 
is by their commutant. Consider for example the full unitary group it(C d ® C d ) on the 
Hilbert space C d (g> C d of two qudits; we may ask which states are invariant with respect 
to that group. In this particular case Schur's lemma tells us that the only invariant 
state is d~ 2 l[ d 2, since il(C d ®C d ) is irreducible. More interesting examples are the states 
invariant with respect to U Cg) U for all U G il(C d ) (Werner states) or with respect to 
U <g> U* for all U G 0A(C d ) (isotropic states). 

In the following we shall focus on a superset of the set of the isotropic states. To 
this aim, let us define three groups: 

ill : = {U G il(C d )| U diagonal in the standard basis} , 

U 2 := {tf ® 17*1 E/e ili}, (3) 

U 3 := {U®U*®U*\U eUx}. 

We may call Hi the diagonal unitary group; it is a maximally commutative subgroup of 
il(C d ), and any matrix U G ill may be written in the form U = diag(wo, Wi, . . . , Wd-i) 
for some system w = (w , Wi, . . . , Wd-i) G C d of complex numbers which lie on the unit 
circle of C. 

2.2. The class of \l2-1nvariant states 

The class of states we want to consider is the class of ^-invariant states, which we 
describe now. Given an arbitrary U w = Ylt=o w x\ x )( x \ e ill an d a two-qudit state in 
the form of (pQ), we calculate 

(U w ® U*)p AB = J2 X yi jpq w xW*a ijtPq \xy) (xy\ij) (pq\ = J2i jpq w i w j a ij, P g\ i j)(P a \^ ^ 
Pab(U w ® U*) = Y, X y ijpq w x w* y a tjm \i]) (pq\xy) (xy\ = J2ijp q WpW* q a ijm \ij){pq\, 

and in order to be il 2 -invariant, the two expressions have to be equal for all possible 
choices of U w . We thus have to ensure WiW*aij pq = w p w*aij pq for all i, j, p, q G Z d . 
If a,ij jPq is non-zero, this amounts to WiW q = w p Wj, and since U w is arbitrary, this can 
be guaranteed only if either (i,q) = (j,p) or (i,q) = (p,j) holds. Thus, all coefficients 
except those of the form a iitPP or a^ij must vanish, and the matrix is diagonal up to a 
block of size d for the basis vectors {|00), |11), . . . , \d — 1, d — 1)}. 

2.3. The OAs-invariant states 

If it exists at all, a ^-invariant state will have a il3-invariant symmetric extension. This 
is because for any symmetric extension pabe of Pab and any U G il 3 , the state U PabeU^ 
symmetrically extends pab- Averaging over the (unique) normalised Haar measure on 
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il 3 will yield the invariant extension p' ABE = f Ueila U PabeU^ dU '. Algebraically spoken, 
if there exists an extension, it can be chosen to lie in the commutant of H3 in the algebra 
of operators on (C^)® 3 . 

Since H3 is commutative, it is easy to calculate its commutant, i. e. the il3-invariant 
states. This can be done in a similar fashion as we did for H2 in the previous subsection, 
and we find that aij kmT may be non-zero, only if (i,q,r) and (p,j,k) are related by a 
permutation. This leads to a block-matrix structure in the standard basis of (C d )® 3 , 
which we can label by the basis vectors; the blocks are 

(i) blocks B k of size 2d — 1 for basis vectors \pkp) and \ppk) for p 7^ k and \kkk), 

(ii) blocks Cijk of size 2 for vectors \ijk) and \ikj), i, j, k being all different, 

(iii) blocks Dij of size 1 for the vector \ijj) with % 7^ j. 

To recall our previous statements, given any extension of our state, we find an extension 
by setting all elements to zero, which do not lie in any of these blocks. By using the 
block structure it gets much easier to check positivity (see the note below Lemma [p. 

2.4- The trace conditions 

Any two-qudit state can be written as pab = pq a ij,pq\ij) (pq\i an extension will 
then have the form pabe = J2ijk P qr "ijk,pqr\'*>jk) (pqr\, and we have to determine the 
coefficients a^ mr . In the case k = r they have to obey certain trace conditions, and we 
want to check where these coefficients aij ktPqk lie. We consider the two cases of nonzero 
coefficients of pab- 

(i) au,p P '- the relevant coefficients au kyPpk he in the blocks B k ; 

(ii) aijjj: the relevant coefficients a,ijk,ijk are the diagonal elements of all blocks. 

The remaining coefficients are zero due to the il 2 -invariance, and we set a^ kmk '■= 0, 
since they lie outside of our block structure. We note that the off-diagonal elements 
O'ijk^kj and aikjjjk of Cij k can be set to zero, since they do not appear in the trace and 
according to Lemma [H any other choice may only harm positivity of pabe- 

2. 5. Symmetry and the reduction of Bk to B' k 

Apart from the trace condition we still have to fulfil the symmetry aij k>pqr = (iikj,prq- 
In the case of the blocks nothing has to be done, and for C^k we note that it is a 
multiple of the 2x2 unit matrix. Let us therefore focus on the blocks Bk- 

Each block Bk is constructed for the basis vectors \ppk) and \pkp) fork^p and the 
exceptional element \kkk). By symmetry a iik . ppk = a ik i !P k P and a iik . p k P = a ikijPpk hold; 
whilst the first-mentioned elements appear in the trace condition, the latter do not. We 
now choose a iikiPkp := a iik , ppk and show that this is not a restriction. Let B' k be the d x d 
submatrix of B k constructed for the basis vectors \ppk) (where k = p is possible). 

Lemma 2 (Equivalence of positivity of B k and B' k ) 

Either B k and B' k are both positive semidefinite or none of them is. 
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Proof: If E>k is positive definite, then so is its submatrix B' k . Assuming that B' k is 
positive semi definite, we choose an arbitrary principal minor of B^. If is is constructed 
by using a pair \ppk) and \pkp), it is zero due to our choice of the elements auk tP kp', if 
not, we can replace all \pkp) by \ppk) to yield a submatrix of B' k . Positivity is thus 
ensured by Lemma [U □ 

Since the elements auk, p k P do not appear in B' k , any other choice may only harm 
positivity. Furthermore, by this reduction, we got rid of the symmetry constraint, 
which is now implicitly hidden in the matrices. 



2. 6. Building up the matrices B' k 

We now want to explicitly construct positive matrices B k . For shortness, let us denote 
Kjk '■= a>ijk,ijk and A^ := for the diagonal elements; the symmetry and the second 
trace condition then read A^ = A^ and J2k ^ijk = Ay- For fixed % G we can write 
a scheme, which is symmetric and consists of non-negative entries: 



k : column index 
j : row index 





1 


i 


d-1 


row sum 





Aioo 


Ajoi 


Ajoi 


A^o.d-i 


Aio 


1 


Aiio 


Ajii 


Ajii 


A^i^-i 


Aji 


% 


Aiio 


Aiii 


Xm 


Aj^^-i 


Aii 


d- 1 


Ai,d-i,o 


Aj,d-i,i 


\,d-l,i 


K,d-l,d-l 


Ai,d-i 


column sum 


Aio 


Aji 


Ajj 


\,d-l 





The elements on the "cross" defined by i = j or i = k lie in the blocks B^, the remaining 
diagonal entries in blocks and all other in blocks Cijk- The second trace condition 
fixes the sum of each row and each column. 

Given such a scheme, positivity has to be ensured within the blocks B' k only. If 
there exists a scheme which fulfils all criteria and produces positive B' k , there exists a 
scheme, where the C^k vanish: if some Xijk =: x > 0, by symmetry A^- = x holds. 
Substituting A^- := A^ + x, X' ikk := Xikk + x and A^- fc := X' ik j := 0, the trace conditions 
are still fulfilled, C^k = and the diagonal elements of the B' k remain unaffected. 

We can thus arbitrarily choose the diagonal entries of the matrices B' k between zero 
and its maximum value, since the Dy, i.e. the entries A^ := A^- — Xuj will absorb the 
remaining value to fulfil the trace condition. The only thing we have to take care of is 
Xuk < Xik for all i, k e Z d , since the first trace condition ensures ^2 p£Zd X pp k = X pp for 
all k G lid- 
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2. 7. Reformulation of the trace condition and the main theorem 

The matrix B' k is constructed with respect to the basis vectors \ppk) for p G Z d , where 
we now consider this particular ordering. Summing up all matrices B' k yields 

^2 k =o B ' k = (5Z fe a ^,ppfc) . p=Q = ( a a,pp)lpLo ='-B (5) 

according to the first trace condition, and as a submatrix of Pab, it is always positive. 
Skipping the primes in B' k , we have altogether shown the following theorem. 

Theorem 1 (Symmetric extendibility of it 2 -invariant states) 

A ^-invariant state pab = J2ij pq a i3,pqVj)ipQ.\ ^ s symmetrically extendible, if and only 
if the matrix B = (om, pp )^p=o ^ C dxd can be decomposed into the sum of d positive 
matrices B^ = (aiik,ppk)^~to e C dxd for k G such that their diagonal elements obey 
the inequalities auk^uk < a>ik,ik f or a ^ h k £ Z d . 

In general, this condition is still difficult to check, however, it is sufficiently appropriate 
for calculating bounds for quantum-cryptographic protocols [8], and we will use it as a 
starting point for the next section. 

Since the sum of positive matrices is positive, we can always enlarge the diagonal 
elements of a positive matrix without changing its positivity. Ignoring for the moment 
the trace conditions, we could set the diagonal elements of all B^ to their maximum 
values. Considering only the non-negativity of all principal minors constructed of 2 x 2 
submatrices, we find the following corollary. 

Corollary 1 (Necessary condition for symmetric extendibility) 

A \X2-invariant symmetrically extendible state fulfils \aa tPP \ < Y2t=o \/ a ik,ikQ»pk,pk for all 

i, pe z d . 

3. Bell-diagonal states 

An important subset of all two-qudit states is the class of (generalised) Bell-diagonal 
states. We define the Bell basis of the Hilbert space H = C d <E> C d by 

\Vi m ) ■= d~ 1/2 Yf' 1 z lk \k)\k em), I, me Z d , (6) 

' ' k=0 

where z := exp (^p) is the principal value of the d-th. root of unity. The Bell-diagonal 
states are the convex combinations of the associated density matrices and can be written 
in the form ^ ^ 

Pab = J2, A lm \V lTn ){V lm \, (7) 

where A[ m > and J2i m Ai m = 1. The coefficient system (A; m )f~ 1 =0 thus defines a 
probability distribution, and we write A* m := ,Zq A[ m for one of its marginals. To 
construct the elements aij tPq , we rewrite (jZJ) as 

p = d- 1 J2 i A lm z l ^ k '^\k,kem)(k',k' em\ (8) 
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and thus find a ijiPq = d 1 S i ej, P egY.i A i,iej zl{t p) ', since $iej, P eq = <Wjeg, tnis S ives rise 
to a block structure of the density matrix, where for every m G Z^ the basis elements 
of the blocks are given by {\ip) \ i Q p = m}. Comparing this with the block structure of 
general ^-invariant states, we find the following Lemma. 

Lemma 3 (Characterisation of il 2 -invariant Bell-diagonal states) 

A Bell-diagonal state with coefficient system (y4; m )f~ 1 =0 is ii 2 -invariant, if and only if 
for all m ^ and I G Z^ there holds A\_ m = d~ x A^ m . 

The two trace conditions of subsection 12.41 now read 

E\_ \dr x A iv := gT 1 J^i Ai z l ^- p \ if i = j and p = q 

0>ijk,pqk — a ij,pq ~ } , . c . , . 

k yd L A* 7ie j = Xij, it i = p and j = q. 

Note that there is no ambiguity in the case i = j = p — q, and the remaining cases 
are all zero and irrelevant. As in subsection 12.41 the relevant components for the first 
trace condition lie in the blocks B k , whilst the relevant components for the second trace 
condition are precisely the diagonal elements of all blocks. 

3.1. Symmetric extensions of ^-invariant Bell-diagonal states 

The Bell-diagonal states have particular properties, which we can use in our discussion. 
Namely, the matrix B = d" 1 (A-ip)ip~Lo °f Theorem [1] is circulant and the conditions on 
the diagonal elements of the B^ also have the circulant structure < d~ x A* iiQ fc. This 
will yield some simplifications. 

The symmetric group Sd can be seen to consist of the permutations on Z^. Using a 
permutation ir G Sd, one can shift rows and columns of a matrix A = (ay)i7=o e C dxd 
to get A^ = (a-K(i),w{j))ijLo- (Technically spoken, this is a representation of Sd on C d .) 
For the cyclic permutation defined by iti(i) :— i Q I, we shall write A® := A^ l >. With 
this definition we can simplify Theorem [I] in the case of Bell-diagonal states. 

Theorem 2 (Symmetric extendibility of ^-invariant Bell-diagonal states) 

For a ^-invariant Bell-diagonal symmetrically extendible state, the set of matrices in 
TheoremUl can be chosen to consist of matrices Bq, Bi, . . . , Bd-i, such that B\ = Bq 
holds for all I £ 1>d- 

Proof: First note that in the Bell-diagonal case, the matrix B of Theorem [1] is circulant 
in the Bell-diagonal case, i.e. B = B® for all / G Z^. This implies 

B = m = B$> + B? + B® + ■■■ + B® v (10) 

and we can define B' k := d~ l Ylt=o ^kei ^ or a ^ ^ e Since the matrix B k fulfils the 
same diagonal constraints as the matrix B' k fulfils the same conditions as B^, and 

EtZlB> k = B. □ 

This Theorem tells us, that we effectively have to look for one matrix Bq only instead 
of d matrices. Corollary [I] now states that symmetrically extendible il 2 -invariant Bell- 
diagonal states fulfil \A ip \ < Ylt=o \f~^k~A^k®iep for all i, p G Z d . 
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3.2. Generalised-isotropic states 



We now want to concentrate on an even more restricted class of states, where we can 
solve the problem completely, the generalised isotropic states [3] . These are Bell-diagonal 
states where Ai Q = Ai> , A 0m = A 0m > and Ai m = Ay m i hold for all I, m ^ 0. Since we 
enforce il2-invariance and normalisation, we are left with two parameters, a and b only, 
for which there hold a, b > and x := a + (d — 1)6 < 1; we have 



A 



1 1 a 



l-a-(d-l)b 
d(d-l) 



if I = m 
if I ^ m 
else. 



0. 



In particular, A* m = 8 m0 -x + (l- 5 m0 ) ■ and Y,i Ao^ (l p) = S ip ■ x + (1 - S ip )(a - b). 
For the moment, we exclude the case d = 2 due to some notational complications, but 
will discuss it later on. Considering the matrix B' Q of Theorem [21 the constraints on the 
diagonal elements read aooo.ooo < d~ x ■ x and auo^io < d~ x ■ ^Ff for i ^ 0. We shall now 
consider the matrix B' ', where we average all rows and columns except the first one: 



E. 



BT- (12) 
(d- 1)! ^-'we^eSdl (p(o)=o) u v ' 

A positive sum of positive matrices being positive, the matrix Bq is positive and can 
replace B' Q in Theorem [2], because the sums of the off-diagonal components are the same 
as in B' Q , as is shown in the following. The use of this mixing over several permutations 
enforces some symmetries; we write B' = (feyOijio l° r := a ao,jjo'- 



The entry feoo remains unaffected and invariant, 

the entries b j, j ^ 0, are mapped to (d — l) _1 (fe i + b 02 + • ■ ■ + feo,d-i), 
the entries b i0 , i ^ 0, are mapped to (d — l) _1 (&io + 6 2 o + • • • + fe<i-i,o), 
the entries fey, i = j ^ 0, are mapped to (d — l) _1 (6n + fe 2 2 + • • • + fe<2-i,d-i)) 
the entries fey, i ^ j, i, j ^ 0, are mapped to (d — l) _1 (d — 2) _1 
We can thus focus on matrices of the form Bq = d~ 1 Md{a. y /3, £, rj), where 



(ii 
(iii 

(iv 

fv 



/ a 



P 



V 



V 



V 



V 

PJ 



idxd. 



(13) 



the determinant of this matrix is given by 

det M d (a, (3 ,^ri) = ({3 -r ] ) d - 2 \a[(3+(d-2)r ] ]-(d 



l)l£P 



(14) 



In order for B' Q ' to be hermitian, a, (3 and rj must be real; the parameter £ can be chosen 
to be real, since £ + £* + (d — 2)r) = a — b is real, and replacing £ by its real part Re£ 
does not change the sum and does not harm positivity of the matrix, which will be a 
consequence of the following Lemma. 
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Lemma 4 (Positive semidefinite matrices) 

The matrix Md(a, /3, £, 77) is positive semidefinite, if and only if the three quantities a, 
(3 and det Md{ot, (3, £, 77) are jointly non-negative, the inequality |£| < v^a^ no/ds and 

Proof: Using Lemma [T], we have to check whether all principal minors of Md(a, (3, £, rj) 
are non-negative. The principal minors of order one are a, (3, the others can easily seen 
to be 

det M r (a,f3,£,r}) for r G {2, . . . , d}, , . 

det M S (J3,P, -q, -q) for s G {2, . . . , d — 1}. 1 j 

By invoking (|T4"j) we find det M s (/3, /3, 77, 77) = {[3 — r/) 5 " 1 ^ + (s — l)r/] , which leads to 
77 G [— -An'i0\- For det M r (a, (3, £, 77) we thus focus on the curly bracket of (JI4"|) to find 
(/3-77)-( r - 1 )detM r+1 (a,/3,e,r7) = (/3 - 77)-^) det M r (a, /3, £, 77) + {pen ~ |£| 2 )- Since 
(0:77 — |£| 2 ) is fixed, we only need to consider the cases r G {2,d}, which are given by 
|£| < \fotf3~ and det Md(a, /3, £, 77) > 0, respectively □ 

Let us for now denote by p(a,b) the state described by ( fTTT) . which is the general 
form of an ^-invariant Bell-diagonal generalised-isotropic state. To satisfy Theorem [2} 
a + (d — = a + (d — 1)6 = 2 must hold. For 2 being fixed, we may thus write 
a = (1 — a)x and /3 = -f^j-, where the diagonal constraints from Theorem [T] read 
a G [0;min {l, ^r}]- The following Lemma allows us to focus on the extremal values 
(a — 6) m i n < < (a — b) max for which the state is symmetrically extendible, given that 
x is fixed. 

Lemma 5 (Mixtures of states) 

Given two symmetrically extendible states p(a\,bi) and ^(02,62)? such that there holds 
x = ai + (d — l)bi = a 2 + (d — 1)6 2; any other state p(a, b) with a + (d — 1)6 = x and 
a>i — b\ < a — b < 02 — 62 is symmetrically extendible. 

Proof: We find p(a, b) = p ■ p(a 1 , 61) + (1 - p) ■ p(a 2 , 62) for p : = ^E^jz^j|^ and note 
that the set of symmetrically extendible states is convex. □ 

We will now investigate the possible choices of £ and 77 to find the allowed values for 
2£ + (d - 2)r] = a - b. 

3.2.1. Calculation of (a — b) max 

To find (a — 6) max , it is sufficient to maximise £ and 77 individually. We can therefore set 
?7max '■— (3 = jzi, which leads to the maximum range for £. The determinant condition 
det M d (a, (3, £, 77) > leads to 



a: 
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which is precisely the same as the other condition £ < yfafi. We have thus found 



£max = x^^^TT 1 ' whicn results in (a - 6) max = 2£ max + (d - 2)i] max = x ■ f(a) for 



m ■= 2 



all -a 



(17) 



and we still have to maximise over a £ [0; min {l, p— }]• The function / monotonically 
increases up to a maximum value of /(pp) = 1- If the choice of a :— pp is allowed, 
any state with positive (a — b) is symmetrically extendible, since a — b < x is always 
true; this holds, if pp < pp or x < -^jzi- El se we choose the maximally possible value 
a := — to find 



a-b<f 



l-x 



X 



(l-x)(2x-l) d-2 



x J V d — 1 d — 1 

as a criterion for symmetric extendibility, given that a — b > 0. 



x) 



(18) 



3.2.2. Calculation of (a — b) m i n 

The calculation of (a — &) mm is more involved than the previous one, because we cannot 
separately minimise £ and rj. We write r] = tx and start with the conditions on £: 



iei< 



' a[P + (d - 2)rj] 



d-l 



= x) 



l-*)te + (<*-2)r 



d-l 



(19) 



Since 77 e there must hold r e [ (d _ 2)( j_ 1} , 

fj, :— (d — 2)(d — 1)t and v := ji + er to find 



-j^rl. We can continue to substitute 



(20) 



for G [— a; (d — 2)a\ and z/ e [0; (d — l)cr]. We can set £ min := — pp\/ (1 — o")^ and 
minimise the value of 



2£+(d-2) V = 



x 



d-l 



-2y/(l-a)v+(v-a) 



(21) 



The first derivative of the bracket with respect to v is 1 — a/^ _1 (1 — o"), unless a = 1 
or v = 0, and the minimum always lies in [0; (<i — l)er]. The minimum attained is — 1, 
so (a — 6) m i n = — pTj-, and since smaller values of (a — b) are impossible by definition, 
all states with a < b can be symmetrically extended. 



3. 3. Discussion of results 

Altogether, the last two calculations of (a— 6) max and (a— &) mm have shown the following. 
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Theorem 3 (Symmetric extendibility of generalised-isotropic states) 

For d > 3, an ^-invariant Bell-diagonal generalised-isotropic state is symmetrically 
extendible, if and only if either x < -^—^ or inequality (TR) or both hold. 

We shall finally discuss the qubit case d = 2. The calculations from I3.27T1 essentially go 
through, but those of 13. 2. 21 fail due to denominators d — 2. However, by a local unitary 
operation we can interchange a and b and find that a state with x G [1/3; 2/3] or 

\a-b\< 2y/(l -x)(2x- 1) (22) 

is symmetrically extendible; rewriting this yields —9a 2 — 14ab — 9b 2 + 12a + 126 — 4 > 0, 
which coincides with the results known before pp. 

Another important case for two-qudit states are isotropic states (cf. subsection [2]). 
It can be shown that the isotropic states are those Bell-diagonal states where the equality 
Aim — holds for all (l,m) ^ (0,0). In this case only a single parameter is left 

(any one of a, b or x). We find (a — 6)i SO tropic = ^rEr > and by solving (|T8|) we find 
x < 2 (d+i) OI a = x — (d — 1) Ju-i) — ^2ct t° De necessary and sufficient for symmetric 
extendibility, if d > 3; for d = 2, the condition is a G [1/4; 3/4]. 

4. Conclusions 

We have derived a criterion for symmetric extendibility of il 2 -invariant two-qudit states 
in terms of a matrix decomposition (Theorem [T]). We have simplified this in the case 
of Bell-diagonal states (Theorem [2]), and for the two-parameter family of generalised- 
isotropic il2-invariant states, we have completely solved the problem (Theorem [3]). The 
relevance of these three criteria is shown by the fact, that particular instances can be 
used to derive bounds on tolerable error rates in quantum cryptography [8j [9] . 
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